[Trac] Webserver can't write to trac.ini

2011-05-17 Thread Dimitri Maziuk
Hi all,

if someone with wiki edit permissions is reading this, can you please
change TracIni page to read The trac.ini configuration file *and its
parent directory* should be writable by the web server, ... --
hopefully it'll save other some poor shmuck a couple of hours of which
tf part of 'chmod 666' did you not understand head scratching.

(Installing stock rpms on RHEL [ScientificLinux] 6.)

Thx
Dima
-- 
Dimitri Maziuk
Programmer/sysadmin
BioMagResBank, UW-Madison -- http://www.bmrb.wisc.edu



signature.asc
Description: OpenPGP digital signature


Re: [Trac] Webserver can't write to trac.ini

2011-05-17 Thread Christian Boos

On 5/17/2011 6:53 PM, Dimitri Maziuk wrote:

Hi all,

if someone with wiki edit permissions is reading this, can you please
change TracIni page to read The trac.ini configuration file *and its
parent directory* should be writable by the web server, ... --
hopefully it'll save other some poor shmuck a couple of hours of which
tf part of 'chmod 666' did you not understand head scratching.


And which part of this is a wiki did you not understand? ;-) Only a 
handful pages are read-only on t.e.o (like the front page WikiStart), 
for the rest (TracIni included), everybody is happily encouraged to edit 
and improve the content!


Side note: using the universal edit button makes it easy to notice when 
one has write permissions on a wiki (not only Trac wikis but most - see 
http://universaleditbutton.org)


-- Christian

--
You received this message because you are subscribed to the Google Groups Trac 
Users group.
To post to this group, send email to trac-users@googlegroups.com.
To unsubscribe from this group, send email to 
trac-users+unsubscr...@googlegroups.com.
For more options, visit this group at 
http://groups.google.com/group/trac-users?hl=en.



Re: [Trac] Webserver can't write to trac.ini

2011-05-17 Thread Dimitri Maziuk
Christian Boos wrote:

 And which part of this is a wiki did you not understand? ;-)

Yeah, well, I'm sure I'll memorize yet another login and password that I
will use most likely never again to add three words to some wiki page.

Aside from the obvious bit where having to make trac.ini world-writable
in order to make trac work is wrong.

Dima
-- 
Dimitri Maziuk
Programmer/sysadmin
BioMagResBank, UW-Madison -- http://www.bmrb.wisc.edu



signature.asc
Description: OpenPGP digital signature


Re: [Trac] Webserver can't write to trac.ini

2011-05-17 Thread Matthew Caron

On 05/17/2011 02:23 PM, Dimitri Maziuk wrote:

Christian Boos wrote:
Yeah, well, I'm sure I'll memorize yet another login and password that I
will use most likely never again to add three words to some wiki page.


keepassx



Aside from the obvious bit where having to make trac.ini world-writable
in order to make trac work is wrong.


You don't - it just needs to be webserver writeable.

Mine:
-rw-r- 1 www-data www-data 37201 2011-05-16 18:54 trac.ini

Parent dir:
drwxrwxr-x 2 www-data admin 4096 2011-03-28 10:58 ./

--
Matthew Caron
Build Engineer
Sixnet | www.sixnet.com
O +1 518 877 5173 Ext. 138
F +1 518 602 9209
matt.ca...@sixnet.com

--
You received this message because you are subscribed to the Google Groups Trac 
Users group.
To post to this group, send email to trac-users@googlegroups.com.
To unsubscribe from this group, send email to 
trac-users+unsubscr...@googlegroups.com.
For more options, visit this group at 
http://groups.google.com/group/trac-users?hl=en.



Re: [Trac] Webserver can't write to trac.ini

2011-05-17 Thread Dimitri Maziuk
Matthew Caron wrote:
 On 05/17/2011 02:23 PM, Dimitri Maziuk wrote:

 Aside from the obvious bit where having to make trac.ini world-writable
 in order to make trac work is wrong.
 
 You don't - it just needs to be webserver writeable.

If you're the only user on your network and your name is root.

Otherwise you're looking at creating and managing lots of groups and
most of us just say screw it, chmod -R a+w even before their number
hits 32.

Dima
-- 
Dimitri Maziuk
Programmer/sysadmin
BioMagResBank, UW-Madison -- http://www.bmrb.wisc.edu



signature.asc
Description: OpenPGP digital signature


Re: [Trac] Webserver can't write to trac.ini

2011-05-17 Thread Erik Andersson
On Tue, May 17, 2011 at 8:23 PM, Dimitri Maziuk dmaz...@bmrb.wisc.eduwrote:

 Christian Boos wrote:

  And which part of this is a wiki did you not understand? ;-)

 Yeah, well, I'm sure I'll memorize yet another login and password that I
 will use most likely never again to add three words to some wiki page.

 You don't need a username, you can edit the pages anonymously

Cheers / Erik

 Aside from the obvious bit where having to make trac.ini world-writable
 in order to make trac work is wrong.

 Dima
 --
 Dimitri Maziuk
 Programmer/sysadmin
 BioMagResBank, UW-Madison -- http://www.bmrb.wisc.edu



-- 
You received this message because you are subscribed to the Google Groups Trac 
Users group.
To post to this group, send email to trac-users@googlegroups.com.
To unsubscribe from this group, send email to 
trac-users+unsubscr...@googlegroups.com.
For more options, visit this group at 
http://groups.google.com/group/trac-users?hl=en.



Re: [Trac] Webserver can't write to trac.ini

2011-05-17 Thread Matthew Caron

On 05/17/2011 02:40 PM, Dimitri Maziuk wrote:

If you're the only user on your network and your name is root.


I don't follow. If you're rewriting the .ini file through Trac, it 
arbitrates access to the file, so no matter who logs in to trac, the 
webserver is what is accessing the filesystem.


If you're having folks ssh in and edit the .ini file manually, but don't 
want them all to be able to edit everyone else's trac .ini files, then 
yeah, you're doing groups or sudo.



Otherwise you're looking at creating and managing lots of groups and
most of us just say screw it, chmod -R a+w even before their number
hits 32.


So, security is hard and I'm a lazy sysadmin?

If it makes you feel any better, HBGary Federal and Sony appear to have 
sysadmins which take a similar view, so you're not alone in the world.

--
Matthew Caron
Build Engineer
Sixnet | www.sixnet.com
O +1 518 877 5173 Ext. 138
F +1 518 602 9209
matt.ca...@sixnet.com

--
You received this message because you are subscribed to the Google Groups Trac 
Users group.
To post to this group, send email to trac-users@googlegroups.com.
To unsubscribe from this group, send email to 
trac-users+unsubscr...@googlegroups.com.
For more options, visit this group at 
http://groups.google.com/group/trac-users?hl=en.



Re: [Trac] Webserver can't write to trac.ini

2011-05-17 Thread Dimitri Maziuk
On 05/17/2011 01:41 PM, Erik Andersson wrote:
 On Tue, May 17, 2011 at 8:23 PM, Dimitri Maziuk dmaz...@bmrb.wisc.eduwrote:
 
 Christian Boos wrote:

 You don't need a username, you can edit the pages anonymously
 
 Cheers / Erik

Oh. I sit corrected. The page's corrected, too.

Dima
-- 
Dimitri Maziuk
Programmer/sysadmin
BioMagResBank, UW-Madison -- http://www.bmrb.wisc.edu



signature.asc
Description: OpenPGP digital signature